Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest parameter with a string check that only blocks :/ and //. Because all WHATWG-compliant browsers normalise backslashes (\) to forward slashes (/) for special schemes, a payload such as /\evil.com/path slips through is_relative_url(), is emitted unchanged in the HTTP Location header, and causes the browser to navigate cross-origin to an attacker-controlled domain. The bug is reachable on a default install and only requires a victim who can be tricked into logging in via a crafted Saltcorn URL. This issue has been patched in versions 1.4.6, 1.5.6, and 1.6.0-beta.5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-42259 Open Redirect Vulnerability in Saltcorn Prior to Versions 1.4.6 and 1.5.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42259
Post summary
The text announces the existence of an Open Redirect vulnerability in Saltcorn versions prior to 1.4.6 and 1.5.6, linking to a vulnerability details page without further technical or exploit information.
CVE-2026-42259 Saltcorn is an extensible, open source, no-code database application builder. Prior to versions 1.4.6, 1.5.6, and 1.6.0-beta.5, Saltcorn validates the post-login dest… https://www.cve.org/CVERecord?id=CVE-2026-42259
Post summary
The CVE concerns a post‑login redirect validation issue in Saltcorn, with fixes available in versions 1.4.6, 1.5.6, and 1.6.0-beta.5.